This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
File:                     4TxHTdRFcajO9AZpTgStasYbJWY.mft (raw, json)
Hash identifier:          OueEel4tkyXrmlwgq+oCee0bonCrfoXXVCNBG8AA5es=
Subject key identifier:   2A:0C:38:38:4E:17:1E:E3:1F:92:62:AB:2C:B2:B8:BD:97:B1:2F:82
Authority key identifier: E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66
Certificate issuer:       /CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
Manifest number:          01A7
Signing time:             Wed 21 Jan 2026 02:33:24 +0000
Manifest this update:     Wed 21 Jan 2026 02:33:23 +0000
Manifest next update:     Wed 28 Jan 2026 02:33:23 +0000
Files and hashes:         1: 4TxHTdRFcajO9AZpTgStasYbJWY.crl (hash: twuv90mBQ3TgOfU6cn3VBnPgHESROKzxsYmavYs+Zb4=)
                          2: 658CF9F2721411EEAC707910C4F9AE02.roa (hash: q+T3C3H2UjoBgZcZ1La6G7C0poZwdj+81El+MVIEtoY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl
                          rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 02:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D313, serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
        Validity
            Not Before: Jan 21 02:33:23 2026 GMT
            Not After : Jan 28 02:33:23 2026 GMT
        Subject: CN=69703af3-5aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9e:25:f9:97:b5:b2:95:cc:77:1c:52:bc:57:
                    cf:4e:60:31:a5:1a:d0:e3:1c:08:22:ea:68:1e:15:
                    d0:8e:83:fb:c7:e5:c1:d1:da:9d:1d:47:62:ea:69:
                    06:dc:9d:32:90:f9:fe:48:d0:d3:10:5f:c3:88:9c:
                    a5:a1:40:9c:e9:5a:20:25:ea:28:4f:fa:d9:24:b8:
                    8c:8b:39:2b:9d:22:16:3d:fa:eb:20:bc:e1:f5:d2:
                    ed:d0:01:7d:b6:a1:ff:6c:97:14:56:ee:aa:1c:c2:
                    4d:9e:7d:6b:ac:f9:89:62:2a:a3:d2:29:b5:87:0e:
                    e2:46:ce:3e:ad:4e:3e:e5:ae:d5:1b:1b:57:9d:41:
                    e8:c8:60:d4:53:87:65:ee:7c:1f:fe:d9:15:09:8b:
                    fe:b5:4a:90:db:46:99:03:cf:2a:a0:7d:73:b8:60:
                    e8:c4:e9:be:21:55:c3:17:e5:14:03:03:e6:c6:48:
                    d6:bd:91:b7:03:a9:27:26:0d:83:08:11:e2:f6:3e:
                    73:c8:31:9a:1b:da:28:98:75:d2:e2:e8:2a:2d:57:
                    fb:59:55:95:bf:a1:6e:17:16:d6:37:34:f2:1c:7a:
                    a1:15:8e:f9:c7:39:e9:90:13:3d:d7:c2:04:c0:48:
                    73:c7:75:d5:3c:b9:47:68:23:6d:8c:fc:5b:a3:f7:
                    96:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0C:38:38:4E:17:1E:E3:1F:92:62:AB:2C:B2:B8:BD:97:B1:2F:82
            X509v3 Authority Key Identifier:
                keyid:E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:37:cf:78:0c:28:31:a1:cf:f0:91:35:f1:f7:a9:80:d7:11:
         f1:d5:04:a6:e7:1e:f7:b9:98:48:e7:c4:3e:b1:3c:b2:9d:07:
         e8:19:b0:20:d9:71:33:d1:f4:71:94:03:5c:74:f7:f8:98:43:
         d4:9f:2f:54:bc:9a:40:4a:ec:11:5a:4a:1a:1c:7e:63:a9:33:
         dd:30:b3:ff:e3:e1:c2:f4:35:b1:01:7b:5e:01:d2:c5:e5:12:
         6e:4e:8c:9b:24:93:44:52:9a:99:a0:f3:f3:39:12:7a:23:29:
         f9:c4:0f:4f:a7:1e:96:25:87:b2:5e:77:1a:04:a2:97:e1:b6:
         a9:65:79:e3:0e:2d:0e:41:e9:51:76:53:2b:14:c4:46:6c:09:
         2c:12:58:da:5b:f8:f2:ba:9a:cc:bd:b2:52:f7:3d:c9:98:79:
         0b:95:8f:c6:98:f5:79:d6:ef:69:99:ab:dc:69:3f:d1:94:89:
         9f:19:ea:6d:1d:04:f0:9c:dd:5c:c0:6c:9a:ca:6b:b0:14:59:
         aa:14:10:b9:71:4a:db:a0:1c:0e:60:f4:ca:81:66:01:56:4f:
         3c:e5:a1:b3:e4:03:12:5c:78:c4:3e:fe:79:ca:12:dc:05:b3:
         3a:41:1d:95:5a:20:69:8d:66:ef:aa:95:9a:59:4c:be:28:23:
         e9:f0:be:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:35:57 2026 by rpki-client